[HBASE-27412] [hbase-thirdparty] Bump dependency versions in hbase-thirdparty

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: thirdparty-4.1.2
• Component/s: dependencies, security, thirdparty
• Hadoop Flags: Reviewed

Release Note

protobuf 3.21.1 -> 3.21.7
netty 4.1.78.Final -> 4.1.82.Final
error prone annotation 2.14.0 > 2.15.0
gson 2.9.0 -> 2.9.1
jetty 9.4.46.v20220331 -> 9.4.49.v20220914
jersey 2.36 -> 2.37
jackson 2.13.3 -> 2.13.4

• Assignee: Duo Zhang
• Reporter: Duo Zhang
• Created: 05/Oct/22 14:57
• Updated: 07/Oct/22 12:04
• Resolved: 06/Oct/22 09:53

Description

There are several security issues in our dependencies, for example

https://nvd.nist.gov/vuln/detail/CVE-2022-42004

Let's bump the dependencies.

Issue Links

• links to: GitHub Pull Request #90